Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA0EAC54962C11F1A30BB7F0CE1D38B0.roa
File:                     EA0EAC54962C11F1A30BB7F0CE1D38B0.roa (raw, json)
Hash identifier:          zOel+m2V535+PrZv3zivt+3zoOBf6gwvfDmqTQMZv6A=
Subject key identifier:   DA:BF:79:D1:AA:1F:B2:00:62:B3:BF:F2:43:82:66:FE:DF:0E:A4:BB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA0EAC54962C11F1A30BB7F0CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:05:08 +0000
ROA not before:           Wed 12 Aug 2026 09:05:04 +0000
ROA not after:            Sun 12 Aug 2029 09:05:04 +0000
asID:                     17561
IP address blocks:        45.200.202.0/24 maxlen: 24
                          45.200.203.0/24 maxlen: 24
                          45.200.204.0/24 maxlen: 24
                          45.200.205.0/24 maxlen: 24
                          45.200.206.0/24 maxlen: 24
                          45.200.207.0/24 maxlen: 24
                          45.200.208.0/24 maxlen: 24
                          45.200.209.0/24 maxlen: 24
                          45.200.210.0/24 maxlen: 24
                          45.200.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117729 (0x1cbe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 09:05:04 2026 GMT
            Not After : Aug 12 09:05:04 2029 GMT
        Subject: CN=6a7c3744-4d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:a4:a6:af:55:4f:21:89:c3:99:63:3a:5b:
                    cf:77:8e:eb:4a:4d:f7:2d:ad:2a:60:7a:2c:31:e6:
                    d3:5c:3d:98:0d:84:7a:c4:bc:ff:49:76:2a:9d:09:
                    c8:48:3b:f7:c8:97:6b:cb:48:55:e4:1a:86:99:d8:
                    0d:f1:cf:21:93:fa:80:d0:58:b8:0d:0c:00:55:55:
                    8f:30:91:c9:e3:95:a2:46:68:f0:aa:25:36:82:3a:
                    c9:27:ed:93:0b:4a:1b:b1:8b:c3:03:de:d5:b7:5d:
                    40:a1:a7:9c:a4:d6:bf:db:df:2e:6f:40:72:e6:90:
                    56:98:89:5d:ef:7e:41:58:31:e5:76:b7:85:14:93:
                    e1:1f:84:91:a4:ca:f9:51:0c:ff:db:5d:bd:5a:eb:
                    08:7f:eb:73:c0:aa:a7:07:59:48:fc:8b:4a:67:a0:
                    75:38:b7:b1:83:7f:5b:87:03:48:b1:1f:3e:04:cc:
                    a5:c2:b5:0d:40:30:b2:37:94:67:95:fd:58:d5:ab:
                    32:d3:a5:8c:ca:b6:e4:31:28:6d:91:0a:b3:46:02:
                    f9:ad:64:94:ac:6f:e3:28:26:fc:2e:7a:f3:02:41:
                    2d:63:11:37:b4:c6:5b:bb:a7:c7:3c:dd:ef:d4:f9:
                    e8:5e:48:d6:3b:ba:dd:bd:e4:18:bd:42:a5:d3:9a:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BF:79:D1:AA:1F:B2:00:62:B3:BF:F2:43:82:66:FE:DF:0E:A4:BB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA0EAC54962C11F1A30BB7F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.202.0-45.200.211.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:e7:ff:ef:39:20:7a:7b:d5:f5:b7:33:e2:06:37:0e:d8:b8:
         29:13:81:a9:03:e7:17:ca:e6:50:1c:14:62:4b:b4:48:df:8a:
         5f:fd:78:54:06:31:7c:8d:a2:e0:93:2a:c6:3b:fb:6d:e1:60:
         75:2a:22:5b:20:34:f6:d8:f1:a0:3c:91:68:3a:ad:92:2d:38:
         39:1f:da:91:76:8f:20:b8:1e:fc:79:78:db:66:18:73:84:17:
         4d:b9:15:da:a0:c3:9e:f9:ec:7d:c4:93:eb:c8:f8:4f:11:ff:
         cc:47:a5:76:00:50:b3:e8:ca:ce:88:b4:8e:8c:2a:bc:1c:81:
         ff:ea:88:ed:d0:43:3b:fb:77:98:fc:f3:8e:b7:e5:cf:83:76:
         a5:ac:8f:eb:6d:26:8f:c4:6d:5a:ea:f5:29:01:89:39:a3:24:
         ec:9e:50:b9:86:a6:e0:f3:e8:f9:53:f8:d0:0a:2e:74:bd:5c:
         3b:1b:7e:86:8b:16:5e:cf:ab:9e:89:23:40:ad:7f:b1:cf:6f:
         e0:a4:4d:22:7c:9b:f7:03:4b:f2:28:51:bd:ee:d9:53:1d:f3:
         c4:43:d2:73:48:f3:31:15:17:5a:29:8f:8b:c2:9f:8c:3e:5e:
         69:c1:cb:66:50:c7:56:65:81:a7:dd:87:e9:a6:1f:97:e5:62:
         dc:55:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----